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CHAPTER  1 


INTRODUCTION 

^  This  Validation  Summary  Report  ( VSR)  describes  the  extent  to  which  a 
specific  Ada  compiler  conforms  to  the  Ada  Standard,  ANSI/MIL-STD-1815A. 
This  report  explains  all  technical  terms  used  within  it  and  thoroughly 
reports  the  results  of  testing  this  compiler  using  the  Ada  Compiler 
Validation  Capability  (ACVC).  An  Ada  compiler  must  be  implemented 
according  to  the  Ada  Standard,  and  any  implementation-dependent  features 
must  conform  to  the  requirements  of  the  Ada  Standard.  The  Ada  Standard 
must  be  implemented  in  its  entirety,  and  nothing  can  be  implemented  that  is 
not  in  the  Standard . > 

Even  though  all  validated  Ada  compilers  conform  to  the  Ada  Standard,  it 
must  be  understood  that  some  differences  do  exist  between  implementations. 
The  Ada  Standard  permits  some  implementation  dependencies— .for  example,  the 
maximum  length  of  identifiers  or  the  maximum  values  of  integer  types. 
Other  differences  between  compilers  result  from  the  characteristics  of 
particular  operating  systems,  hardware,  or  implementation  strategies.  All 
the  dependencies  observed  during  the  process  of  testing  this  compiler  are 
given  in  this  report .  \ 


The  information  in  this  report  is  derived  from  the  test  results  produced 
during  validation  testing.  The  validation  process  includes  submitting  a 
suite  of  standardized  tests,  the  ACVC,  as  inputs  to  an  Ada  compiler  and 
evaluating  the  results. >  The  purpose  of  validating  is  to  ensure  conformity 
of  the  compiler  to  the  Ada  Standard  by  testing  that  the  compiler  properly 
implements  legal  language  constructs  and  that  it  identifies  and  rejects 
illegal  language  constructs.  The  testing  also  identifies  behavior  that  is 
implementation  dependent  but  permitted  by  the  Ada  Standard.  Six  classes  of 
tests  are  used.  These  tests  are  designed  to  perform  checks  at  compile 
time,  at  link  time,  and  during  execution. 
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1.1  PURPOSE  OF  THIS  VALIDATION  SUMMARY  REPORT 

This  VSR  documents  the  results  of  the  validation  testing  performed  on  an 
Ada  compiler.  Testing  was  carried  out  for  the  following  purposes: 

.  To  attempt  to  identify  any  language  constructs  supported  by  the 
compiler  that  do  not  conform  to  the  Ada  Standard 

.  To  attempt  to  identify  any  language  constructs  not  supported  by 
the  compiler  but  required  by  the  Ada  Standard 

.  To  determine  that  the  implementation-dependent  behavior  is  allowed 
by  the  Ada  Standard 


Testing  of  this  compiler  was  conducted  by  SofTech,  Inc.  under  the 
direction  of  the  AVF  according  to  procedures  established  by  the  Ada  Joint 
Program  Office  and  administered  by  the  Ada  Validation  Organization  (AVO). 
On-site  testing  was  completed  18  June  1988  at  Santa  Clara,  CA. 


1.2  USE  OF  THIS  VALIDATION  SUMMARY  REPORT 

Consistent  with  the  national  laws  of  the  originating  country,  the  AVO  may 
make  full  and  free  public  disclosure  of  this  report.  In  the  United  States, 
this  is  provided  in  accordance  with  the  "Freedom  of  Information  Act"  (5 
U.S.C.  #552).  The  results  of  this  validation  apply  only  to  the  computers, 
operating  systems,  and  compiler  versions  identified  in  this  report. 

The  organizations  represented  on  the  signature  page  of  this  report  do  not 
represent  or  warrant  that  all  statements  set  forth  in  this  report  are 
accurate  and  complete,  or  that  the  subject  compiler  has  no  nonconformities 
to  the  Ada  Standard  other  than  those  presented .  Copies  of  this  report  are 
available  to  the  public  from: 

Ada  Information  Clearinghouse 
Ada  Joint  Program  Office 
OUSDRE 

The  Pentagon,  Rm  3D- 139  (Fern  Street) 

Washington  DC  20301-3081 

or  from: 


Ada  Validation  Facility 
ASD/SCEL 

Wright-Patterson  AFB  OH  45433-6503 
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Questions  regarding  this  report  or  the  validation  test  results  should  be 
directed  to  the  AVF  listed  above  or  to: 

Ada  Validation  Organization 
Institute  for  Defense  Analyses 
1801  North  Beauregard  Street 
Alexandria  VA  22311 


1.3  REFERENCES 


1.  Reference  Manual  for  the  Ada  Programming  Language, 
ANSI/MIL-STD-1815A,  February  1983  and  ISO  8652-1987. 

2.  Ada  Compiler  Validation  Procedures  and  Guidelines ,  Ada  Joint 
Program  Office,  1  January  1987. 

3.  Ada  Compiler  Validation  Capability  Implementers’  Guide ,  SofTeeh, 
Inc.,  December  1986. 

4.  Ada  Compiler  Validation  Capability  User’s  Guide ,  December  1986. 


1.4  DEFINITION  OF  TERMS 


ACVC  The  Ada  Compiler  Validation  Capability.  The  set  of  Ada 

programs  that  tests  the  conformity  of  an  Ada  compiler  to  the 
Ada  programming  language . 


Ada  An  Ada  Commentary  contains  all  information  relevant  to  the 

Commentary  point  addressed  by  a  comment  on  the  Ada  Standard.  These 

comments  are  given  a  unique  identification  number  having  the 
form  Al-ddddd. 


Ada  Standard  ANSI/MIL-STD-181 5A,  February  1983  and  ISO  8652-1987. 


Applicant  The  agency  requesting  validation. 

AVF  The  Ada  Validation  Facility.  The  AVF  is  responsible  for 

conducting  compiler  validations  according  to  procedures 
contained  in  the  Ada  Compiler  Validation  Procedures  and 
Guidelines . 


AVO  The  Ada  Validation  Organization.  The  AVO  has  oversight 

authority  over  all  AVF  practices  for  the  purpose  of 
maintaining  a  uniform  process  for  validation  of  Ada 
compilers.  The  AVO  provides  administrative  and  technical 
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support  for  Ada  validations  to  ensure  consistent  practices. 

Compiler  A  processor  for  the  Ada  language.  In  the  context  of  this 

report,  a  compiler  is  any  language  processor,  including 
cross-compilers,  translators,  and  interpreters. 

Failed  test  An  ACVC  test  for  which  the  compiler  generates  a  result  that 

demonstrates  nonconformity  to  the  Ada  Standard. 

Host  The  computer  on  which  the  compiler  resides. 

Inapplicable  An  ACVC  test  that  uses  features  of  the  language  that  a 

test  compiler  is  not  required  to  support  or  may  legitimately 

support  in  a  way  other  than  the  one  expected  by  the  test. 

Passed  test  An  ACVC  test  for  which  a  compiler  generates  the  expected 

result . 

Target  The  computer  for  which  a  compiler  generates  code. 

Test  A  program  that  cheeks  a  compiler's  conformity  regarding  a 

particular  feature  or  a  combination  of  features  to  the  Ada 
Standard.  In  the  context  of  this  report,  the  term  is  used  to 
designate  a  single  test,  which  may  comprise  one  or  more 
files. 

An  ACVC  test  found  to  be  incorrect  and  not  used  to  check 
conformity  to  the  Ada  Standard.  A  test  may  be  incorrect 
because  it  has  an  invalid  test  objective,  fails  to  meet  its 
test  objective.,  or  contains  illegal  or  erroneous  use  of  the 
language . 


1.5  ACVC  TEST  CLASSES 

Conformity  to  the  Ada  Standard  is  measured  using  the  ACVC.  The  ACVC 
contains  both  legal  and  illegal  Ada  programs  structured  into  six  test 
classes:  A,  B,  C,  D,  E,  and  L.  The  first  letter  of  a  test  name  identifies 
the  class  to  which  it  belongs.  Class  A,  C,  D,  and  E  tests  are  executable, 
and  special  program  units  are  used  to  report  their  results  during 
execution.  Class  B  tests  are  expected  to  produce  compilation  errors. 
Class  L  tests  are  expected  to  produce  compilation  or  link  errors. 

Class  A  tests  check  that  legal  Ada  programs  can  be  successfully  compiled 
and  executed.  There  are  no  explicit  program  components  in  a  Class  A  test 
to  check  semantics.  For  example,  a  Class  A  test  checks  that  reserved  words 
of  another  language  (other  than  those  already  reserved  in  the  Ada  language) 
are  not  treated  as  reserved  words  by  an  Ada  compiler.  A  Class  A  test  is 
passed  if  no  errors  are  detected  at  compile  time  and  the  program  executes 
to  produce  a  PASSED  message. 


Withdrawn 

test 
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Class  B  tests  check  that  a  compiler  detects  illegal  language  usage.  Class 
B  tests  are  not  executable.  Each  test  in  this  class  is  compiled  and  the 
resulting  compilation  listing  is  examined  to  verify  that  every  syntax  or 
semantic  error  in  the  test  is  detected.  A  Class  B  test  is  passed  if  every 
illegal  construct  that  it  contains  is  detected  by  the  compiler. 

Class  C  tests  check  that  legal  Ada  programs  can  be  correctly  compiled  and 
executed.  Each  Class  C  test  is  self-checking  and  produces  a  PASSED, 
FAILED,  or  NOT  APPLICABLE  message  indicating  the  result  when  it  is 
executed . 

Class  D  tests  check  the  compilation  and  execution  capacities  of  a  compiler. 
Since  there  are  no  capacity  requirements  placed  on  a  compiler  by  the  Ada 
Standard  for  some  parameters— for  example,  the  number  of  identifiers 
permitted  in  a  compilation  or  the  number  of  units  in  a  library— a  compiler 
may  refuse  to  compile  a  Class  D  test  and  still  be  a  conforming  compiler. 
Therefore,  if  a  Class  D  test  fails  to  compile  because  the  capacity  of  the 
compiler  is  exceeded,  the  test  is  classified  as  inapplicable.  If  a  Class  D 
test  compiles  successfully,  it  is  self-checking  and  produces  a  PASSED  or 
FAILED  message  during  execution. 

Each  Class  E  test  is  self-checking  and  produces  a  NOT  APPLICABLE,  PASSED, 
or  FAILED  message  when  it  is  compiled  and  executed.  However,  the  Ada 
Standard  permits  an  implementation  to  reject  programs  containing  some 
features  addressed  by  Class  E  tests  during  compilation.  Therefore,  a  Class 
E  test  is  passed  by  a  compiler  if  it  is  compiled  successfully  and  executes 
to  produce  a  PASSED  message,  or  if  it  is  rejected  by  the  compiler  for  an 
allowable  reason. 

Class  L  tests  check  that  incomplete  or  illegal  Ada  programs  involving 
multiple,  separately  compiled  units  are  detected  and  not  allowed  to 
execute.  Class  L  tests  are  compiled  separately  and  execution  is  attempted. 
A  Class  L  test  passes  if  it  is  rejected  at  link  time— that  is,  an  attempt 
to  execute  the  main  program  must  generate  an  error  message  before  any 
declarations  in  the  main  program  or  any  units  referenced  by  the  main 
program  are  elaborated. 

Two  library  units,  the  package  REPORT  and  the  procedure  CHECK_FILE,  support 
the  self-checking  features  of  the  executable  tests.  The  package  REPORT 
provides  the  mechanism  by  which  executable  tests  report  PASSED,  FAILED,  or 
NOT  APPLICABLE  results.  It  also  provides  a  set  of  identity  functions  used 
to  defeat  some  compiler  optimizations  allowed  by  the  Ada  Standard  that 
would  circumvent  a  test  objective.  The  procedure  CHECK_FILE  is  used  to 
check  the  contents  of  text  files  written  by  some  of  the  Class  C  tests  for 
chapter  14  of  the  Ada  Standard.  The  operation  of  REPORT  and  CHECK_FILE  is 
checked  by  a  set  of  executable  tests.  These  tests  produce  messages  that 
are  examined  to  verify  that  the  units  are  operating  correctly.  If  these 
units  are  not  operating  correctly,  then  the  validation  is  not  attempted. 

The  text  of  the  tests  in  the  ACVC  follow  conventions  that  are  intended  to 
ensure  that  the  tests  are  reasonably  portable  without  modification.  For 
example,  the  test3  make  use  of  only  the  basic  set  of  55  characters,  contain 
lines  with  a  maximum  length  of  72  characters,  use  small  numeric  values,  and 
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place  features  that  may  not  be  supported  by  all  Implementations  in  separate 
testa.  However,  some  tests  contain  values  that  require  the  test  to  be 
customized  according  to  implementation-specific  values — for  example,  an 
illegal  file  name.  A  list  of  the  values  used  for  this  validation  is 
provided  in  Appendix  C. 

A  compiler  must  correctly  process  each  of  the  tests  in  the  suite  and 
demonstrate  conformity  to  the  Ada  Standard  by  either  meeting  the  pass 
criteria  given  for  the  test  or  by  showing  that  the  test  is  inapplicable  to 
the  implementation.  The  applicability  of  a  test  to  an  implementation  is 
considered  each  time  the  implementation  is  validated.  A  test  that  is 
inapplicable  for  one  validation  is  not  necessarily  inapplicable  for  a 
subsequent  validation.  Any  test  that  was  determined  to  contain  an  illegal 
language  construct  or  an  erroneous  language  construct  is  withdrawn  from  the 
ACVC  and,  therefore,  is  not  used  in  testing  a  compiler.  The  tests 
withdrawn  at  the  time  of  this  validation  are  given  in  Appendix  D. 
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CHAPTER  2 

CONFIGURATION  INFORMATION 

2.1  CONFIGURATION  TESTED 

The  candidate  compilation  system  for  this  validation  was  tested  under  the 
following  configuration: 

Compiler:  M1750A,  Version  2.0.122 
ACVC  Version:  1.9 
Certificate  Number:  8306 13W1 .09086 
Host  Computer: 

Machine:  R1000  Series  200 

Operating  System:  Rational  Environment 

Version  D_10_9_J_1750a 

Memory  Size:  32  Mb 

Target  Computer: 

Machine:  Milcros  MRS  1750/S0 

Operating  System:  Bare 

Memory  Size:  128  Kwords 

Communications  Network:  RS  232  Direct  Connect 
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2.2  IMPLEMENTATION  CHARACTERISTICS 

One  of  the  purposes  of  validating  compilers  is  to  determine  the  behavior  of 
a  compiler  in  those  areas  of  the  Ada  Standard  that  permit  implementations 
to  differ.  Class  D  and  E  tests  specifically  check  for  such  implementation 
differences.  However,  tests  in  other  classes  also  characterize  an 
implementation.  The  tests  demonstrate  the  following  characteristics: 


.  Capacities. 

The  compiler  correctly  processes  tests  containing  loop  statements 
nested  to  65  levels,  block  statements  nested  to  65  levels,  and 
recursive  procedures  separately  compiled  as  subunits  nested  to  10 
levels.  It  correctly  processes  a  compilation  containing  723 
variables  in  the  same  declarative  part.  (See  tests  D55A03A. .H  (8 
tests),  D56001B,  D64005E..G  (3  tests),  and  D29002K.) 


.  Universal  integer  calculations. 

An  implementation  is  allowed  to  reject  universal  integer 
calculations  having  values  that  exceed  SYSTEM. MAX_INT.  This 
implementation  processes  64  bit  integer  calculations,  but  if  the 
result  requires  64  bits  of  storage,  the  statement  is  rejected  in 
compilation.  (See  tests  D4A002A,  D4A002B,  D4A004A,  and  D4A004B.) 


.  Predefined  types. 

This  implementation  supports  the  additional  predefined  type 
L0NG_FL0AT  in  the  package  STANDARD.  (See  tests  B86001C  and 
B86001D.) 


.  Based  literals . 

An  implementation  is  allowed  to  reject  a  based  literal  with  a 
value  exceeding  SYSTEM.  MAX_INT  during  compilation,  or  it  may  raise 
NUMERIC_ERR0R  or  C0NSTRAINT_ERR0R  during  execution.  This 
implementation  raises  NUMERIC_ERROR  during  execution.  (See  test 
E24101A.) 


.  Expression  evaluation. 

Apparently  some  default  initialization  expressions  for  record 
components  are  evaluated  before  any  value  is  checked  to  belong  to 
a  component's  subtype.  (See  test  C32117A.) 

Assignments  for  subtypes  are  performed  with  the  same  precision  as 
the  base  type.  (See  test  C3571ZB.) 
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This  implementation  uses  no  extra  bits  for  extra  precision.  This 
implementation  uses  all  extra  bits  for  extra  range.  (See  test 
C35903A.) 

No  exception  is  raised  when  an  integer  literal  operand  in  a 
comparison  or  membership  test  is  outside  the  range  of  the  base 
type.  (See  test  C45232A.) 

No  exception  is  raised  when  a  literal  operand  in  a  fixed-point 
comparison  or  membership  test  is  outside  the  range  of  the  base 
type.  (See  test  C45252A.) 

Apparently  underflow  is  not  gradual.  (See  tests  C45524A..Z.) 


Rounding . 

The  method  used  for  rounding  to  integer  is  apparently  round  away 
from  zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  longest  integer  is  apparently 
round  away  from  zero.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  integer  in  static  universal  real 
expressions  is  apparently  round  away  from  zero.  (See  test 
C4A014A.) 


Array  types. 

An  implementation  is  allowed  to  raise  NUMERIC_ERROR  or 
CONSTRAINT_ERROR  for  an  array  having  a  'LENGTH  that  exceeds 
STANDARD. INTEGER' LAST  and/or  SYSTEM. MAX_INT.  For  this 
implementation: 

Declaration  of  an  array  type  or  subtype  declaration  with  more  than 
SYSTEM. MAX  INT  components  raises  NUMERIC_ERROR .  (See  test 
C36003A.) 

NUMERIC_ERROR  is  raised  when  an  array  type  with  INTEGER 'LAST  +  2 
components  is  declared.  (See  test  C36202A.) 

NUMERIC_ERROR  is  raised  when  an  array  type  with  SYSTEM.MAX_INT  +  2 
components  is  declared.  (See  test  C36202B.) 

A  packed  BOOLEAN  array  having  a  'LENGTH  exceeding  INTEGER 'LAST 
raises  NUMERIC  ERROR  when  the  array  objects  are  declared.  (See 
test  C52103X.) 

A  packed  two-dimensional  BOOLEAN  array  with  more  than  INTEGER' LAST 
components  raises  NUMERIC_ERROR  when  the  array  type  is  declared. 
(See  test  C52104Y.) 
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A  null  array  with  one  dimension  of  length  greater  than 
INTEGER* LAST  may  raise  NUMERIC_ERROR  or  CONSTRAINT_ERROR  either 
when  declared  or  assigned.  Alternatively,  an  implementation  may 
accept  the  declaration.  However,  lengths  oust  match  in  array 
slice  assignments.  This  implementation  raises  NUMERIC_ERROR  when 
the  array  type  is  declared.  (See  test  E52103Y.) 

In  assigning  one-dimensional  array  types ,  the  expression  appears 
to  be  evaluated  in  its  entirety  before  CONSTRAINT_ERROR  is  raised 
when  checking  whether  the  expression's  subtype  is  compatible  with 
the  target's  subtype.  In  assigning  two-dimensional  array  types, 
the  expression  does  not  appear  to  be  evaluated  in  its  entirety 
before  CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target’s  subtype. 
(See  test  C52013A.) 


.  Discriminated  types . 

During  compilation,  an  implementation  is  allowed  to  either  accept 
or  reject  an  incomplete  type  with  discriminants  that  is  used  in  an 
access  type  definition  with  a  compatible  discriminant  constraint. 
This  implementation  accepts  such  subtype  indications.  (See  test 
E38104A.) 

In  assigning  record  types  with  discriminants,  the  expression 
appears  to  be  evaluated  in  its  entirety  before  CONSTRA INT_ERROR  is 
raised  when  checking  whether  the  expression's  subtype  is 
compatible  with  the  target's  subtype.  (See  test  C52013A.) 


.  Aggregates. 

In  the  evaluation  of  a  multi-dimensional  aggregate,  all  choices 
appear  to  be  evaluated  before  checking  against  the  index  type. 
(See  tests  C^3207A  and  CU3207B.) 

In  the  evaluation  of  an  aggregate  containing  subaggregates,  not 
all  choices  are  evaluated  before  being  checked  for  identical 
bounds.  (See  test  EM3212B.) 

Not  all  choices  are  evaluated  before  CONSTRAINT_ERROR  is  raised  if 
a  bound  in  a  nonnull  range  of  a  nonnull  aggregate  does  not  belong 
to  an  index  subtype.  (See  test  E43211B.) 


.  Representation  clauses . 

An  implementation  might  legitimately  place  restrictions  on 
representation  clauses  used  by  some  of  the  tests.  If  a 
representation  clause  is  used  by  a  test  in  a  way  that  violates  a 
restriction,  then  the  implementation  must  reject  it. 
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Enumeration  representation  clauses  containing  noncontiguous  values 
for  enumeration  types  other  than  character  and  boolean  types  are 
supported.  (See  tests  C35502I..J,  C35502I..N,  and  A39005F.) 

Enumeration  representation  clauses  containing  noncontiguous  values 
for  character  types  are  supported.  (See  tests  C 35507 I.. J, 
C35507M..N,  and  C55316A.) 

Enumeration  representation  clauses  for  boolean  types  containing 
representational  values  other  than  (FALSE  =>  0,  TRUE  =>  1)  are  not 
supported.  (See  tests  C35508I..J  and  C35508M..N.) 

Length  clauses  with  SIZE  specifications  for  enumeration  types  are 
supported.  (See  test  A39005B. ) 

Length  clauses  with  STORAGE_SIZE  specifications  for  access  types 
are  supported.  (See  tests  A39005C  and  C87B62B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  task  types  are 
supported.  (See  tests  A39005D  and  C87B62D.) 

Length  clauses  with  SMALL  specifications  are  supported.  (See 
tests  A39005E  and  C87B62C.) 

Record  representation  clauses  are  supported;  however,  a  component 
clause  for  a  component  of  a  composite  type  may  not  implicitly 
cause  a  component  array  to  be  packed.  (See  test  A39005G.) 

Length  clauses  with  SIZE  specifications  for  derived  integer  types 
are  not  supported.  (See  test  C87B62A. ) 


Pragmas . 

The  pragma  INLINE  Is  not  supported  for  procedures.  The  pragma 
INLINE  is  not  supported  for  functions.  (See  tests  LA3004A, 
LA300UB,  EA3004C,  EA3004D,  CA30O4E,  and  CA3004F.) 


Input/output. 

The  package  SEQUENTIAL_I0  cannot  be  instantiated  with 
unconstrained  array  types  and  record  types  with  discriminants 
without  defaults.  (See  tests  AE2101C,  EE2201D,  and  EE2201E.) 

The  package  DIRECT_I0  cannot  be  instantiated  with  unconstrained 
array  types  and  record  types  with  discriminants  without  defaults. 
(See  tests  AE2101H,  EE2401D,  and  EE2401G.) 

Tne  director,  AJ?0,  has  determined  (AI-00332)  that  every  call  to 
OPEN  and  CREATE  must  raise  USE_ERR0R  or  NAME_ERROR  if  file 
input/output  is  not  supported.  This  implementation  exhibits  this 
behavior  for  SEQUENTIAL_IO,  DIRECT  10,  and  TEXT  10. 
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.  Generics 

Generic  subprogram  declarations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  tests  CA1012A  and  CA2009F.) 

Generic  package  declarations  and  bodies  can  be  compiled  in 

separate  compilations.  (See  tests  CA2009C,  BC3204C,  and  BC3205D.) 

Generic  unit  bodies  and  their  subunits  can  be  compiled  in  separate 
compilations.  (See  test  CA3011A.) 


CHAPTER  3 


TEST  INFORMATION 


3.1  TEST  RESULTS 

Version  1.9  of  the  ACVC  comprises  3122  tests.  When  this  compiler  was 
tested,  27  tests  had  been  withdrawn  because  of  test  errors.  The  AVF 
determined  that  519  tests  were  inapplicable  to  this  implementation.  All 
inapplicable  tests  were  processed  during  validation  testing  except  for  285 
executable  tests  that  use  floating-point  precision  exceeding  that  supported 
by  the  implementation  and  174  executable  tests  that  use  file  operations  not 
supported  by  the  implementation.  Modifications  to  the  code,  processing,  or 
grading  for  79  tests  were  required  to  successfully  demonstrate  the  test 
objective.  (See  section  3.6.) 

The  AVF  concludes  that  the  testing  results  demonstrate  acceptable 
conformity  to  the  Ada  Standard. 


3.2  SUMMARY  OF  TEST  RESULTS  BY  CLASS 


RESULT 

A 

B 

TEST 

C 

CLASS 

D 

E 

L 

TOTAL 

Passed 

106 

1046 

1354 

15 

11 

44 

2576 

Inapplicable 

4 

5 

499 

2 

7 

2 

519 

Withdrawn 

3 

2 

21 

0 

1 

0 

27 

TOTAL 

113 

1053 

1874 

17 

19 

46 

3122 
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3.3  SUMMARY  OF  TEST  RESULTS  BY  CHAPTER 


RESULT  CHAPTER  TOTAL 

_  2  \ _ 4  5  6  _ 7  8  9  JO.  _H  _12  _2± _ 

Passed  184  465  478  242  165  98  141  326  131  36  234  3  73  2576 

Inapplicable  20  107  196  6  1  0  2  1  6  0  0  0  180  519 

Withdrawn  2  14  30012000212  27 

TOTAL  206  586  677  248  166  99  145  327  137  36  236  4  255  3122 


3-4  WITHDRAWN  TESTS 

The  following  27  tests  were  withdrawn  from  ACVC  Version  1.9  at  the  time  of 
this  validation: 


B28003A 

E28005C 

C34004A 

A35902C 

C35502P 

C35904A 

C 35904B 

C35A03E 

C35A03R 

C37213H 

C37213J 

C37215C 

C37215E 

C37215G 

C37215H 

C38102C 

C41402A 

C45332A 

C45614C 

A74106C 

C85018B 

C87B04B 

CC1311B 

BC3105A 

ADI A0 1 A 

CE2401H 

CE3208A 

See  Appendix  D  for  the  reason  that  each  of  these  tests  was  withdrawn. 


3.5  INAPPLICABLE  TESTS 

Some  tests  do  not  apply  to  all  compilers  because  they  make  use  of  features 
that  a  compiler  is  not  required  by  the  Ada  Standard  to  support.  Others  may 
depend  on  the  result  of  another  test  that  is  either  inapplicable  or 
withdrawn.  The  applicability  of  a  test  to  an  implementation  is  considered 
each  time  a  validation  is  attempted.  A  test  that  is  inapplicable  for  one 
validation  attempt  is  not  necessarily  inapplicable  for  a  subsequent 
attempt.  For  this  validation  attempt,  519  tests  were  inapplicable  for  the 
reasons  indicated: 

.  A39005G  uses  a  record  representation  component  clause  for  a 

component  of  a  composite  type  that  requires  the  component  array 
type  to  be  implicitly  packed.  This  is  not  supported  by  this 
compiler . 

.  C35508I..J  (2  tests)  and  C35508M..N  (2  tests)  use  enumeration 

representation  clauses  containing  representational  values  other 
than  (FALSE  s>  0,  TRUE  =>  1).  These  clauses  are  not  supported  by 
thir  compiler. 
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.  C35702A  uses  SHORT_FLOAT  which  is  not  supported  by  this 

implementation • 

.  The  following  tests  use  SHORT_INTEGER ,  which  is  not  supported  by 
this  compiler: 

C45231B  C45304B  C45502B  C45503B  C45504B 

C45504E  C45611B  C45613B  C45614B  C45631B 

C45632B  B52004E  C55B07B  B55B09D 

.  The  following  tests  use  LONG_INTEGER ,  which  is  not  supported  by 
this  compiler: 

C45231C  C45304C  C45502C  C45503C  C45504C 

C45504F  C45611C  C45613C  C45631C  C45632C 

B52004D  C55B07A  B55B09C 

.  C45231D  requires  a  macro  substitution  for  any  predefined  numeric 

types  other  than  INTEGER,  SHORT_INTEGER ,  LONG_INTEGER ,  FLOAT, 
SHORT_FLOAT,  and  LONG— FLOAT.  This  compiler  does  not  support  any 
such  types. 

.  C45531M,  C45531N,  C45532M,  and  C45532N  use  fine  48-bit  fixed-point 

base  types  which  are  not  supported  by  this  compiler. 

.  C455310,  C45531P,  C455320,  and  C45532P  use  coarse  48-bit 

fixed-point  base  types  which  are  not  supported  by  this  compiler. 

.  C4A013B  uses  a  static  value  that  is  outside  the  range  of  the  most 

accurate  floating-point  base  type.  The  declaration  was  rejected 
at  compile  time. 

.  D4A0C4B  uses  storage  for  a  64-bit  integer  result  which  is  not 
supported  by  this  compiler. 

.  D64005G  uses  nested  procedures  as  subunits  to  a  level  of  17,  which 

exceeds  the  memory  available  to  the  program  on  the  target. 

.  386001D  requires  a  predefined  numeric  type  other  than  those 

defined  by  the  Ada  language  in  package  STANDARD.  There  is  no  such 
type  for  this  implementation. 

.  C87B62A  uses  length  clauses  with  SIZE  specificaions  for  derived 

integer  types  which  are  not  supported  by  this  compliler. 

.  C96005B  requires  the  range  of  type  DURATION  to  be  different  from 

those  of  its  base  type;  in  this  implementation  they  are  the  same. 

.  CA3004E,  EA3004C,  and  LA3004A  use  the  INLINE  pragma  for 

procedures,  which  is  not  supported  by  this  compiler. 
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.  CA3004F,  EA3004D,  and  LA3004B  use  the  INLINE  pragma  for  functions, 

which  is  not  supported  by  this  compiler. 

.  AE2101C,  EE2201D,  and  EE2201E  use  instantiations  of  package 

SEQUENT IAL_IO  with  unconstrained  array  types  and  record  types 
having  discriminants  without  defaults.  These  instantiations  are 
rejected  by  this  compiler. 

.  AE2101H,  EE2401D,  and  EE2401G  use  instantiations  of  package 

DIRECT_IO  with  unconstrained  array  types  and  record  types  having 
discriminants  without  defaults.  These  instantiations  are  rejected 
by  this  compiler. 

.  The  following  174  tests  are  inapplicable  because  sequential,  text, 
and  direct  access  files  are  not  supported: 


CE2102C 

CE2102G. .H(2) 

CE2102K 

CE2104A. .D(4) 

CE2105A. .B(2) 

CE2106A. .B(2) 

CE2107A. .1(9) 

CE2108A* .D(4) 

CE2109A. .C(3) 

CE2110A. .C(3) 

CE21 1 1A. .E(5) 

CE21 1 1G. .H(2) 

CE2115A..B(2) 

CE2201A. .C ( 3 ) 

CE2201F.  .G(2) 

CE2204A. .B( 2) 

CE2208B 

CE2210A 

CE2401A. .C(3) 

CE2401E. .F(2) 

CE2404A 

CE2405B 

CE2406A 

CE2407A 

CE2408A 

CE2409A 

CE2410A 

CE2411A 

AE3101A 

CE3102B 

EE3102C 

CE3103A 

CE3104A 

CE3107A 

CE3108A..B(2) 

CE3109A 

CE3110A 

CE3111A..E(5) 

CE31 12A. .B(2) 

CE3H4A..B(2) 

CE3115A 

CE3203A 

CE3301A. .C ( 3) 

CE3302A 

CE3305A 

CE3402A. .0(4) 

CE3403A..C(3) 

CE3403E..F(2) 

CE3404A..C(3) 

CE3405A..D(4) 

CE3406A..D(4) 

CE3407A..C(3) 

CE3408A..C(3) 

CE3409A 

CE3409C..F(4) 

CE3410A 

CE3410C..F(4) 

CE3411A 

CE3412A 

CE3413A 

CE3413C 

CE3602A..D(4) 

CE3603A 

CE3604A 

CE3605A..E(5) 

CE3606A..B(2) 

CE3704A. .B(2) 

CE3704D. .F(3) 

CE3704M. .0(3) 

CE3706D 

CE3706F 

CE3804A..E(5) 

CE3804G 

CE3804I 

CE3804K 

CE3804M 

CE3805A..B(2) 

CE3806A 

CE3806D. .E(2) 

CE3905A. .C(3) 

CE3905L 

CE3906A. .C ( 3) 

CE3906E. .F(2) 

Results  of  running 

a  subset  of  these 

tests  showed  i 

that  the  proper 

exceptions  are  raised  for  unsupported  file  operations. 


.  The  following  285  tests  require 
exceeds  the  maximum  of  9  digits 

C24113F..Y  (20  tests) 
C35706F..Y  (20  tests) 
C35708F..Y  (20  tests) 
C45241F..Y  (20  tests) 
C45421F..Y  (20  tests) 
C45524F..Z  (21  tests) 
C45641F..Y  (20  tests) 


a  floating-point  accuracy  that 
supported  by  this  implementation: 

C35705F..Y  (20  tests) 

C35707F..Y  (20  tests) 

C35802F..Z  (21  tests) 

C45321F. .Y  (20  tests) 

C45521F..Z  (21  tests) 

C45621F..Z  (21  tests) 

C46012F..Z  (21  tests) 
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3.6  TEST,  PROCESSING,  AND  EVALUATION  MODIFICATIONS 

It  is  expected  that  some  tests  will  require  modifications  of  code, 
processing,  or  evaluation  in  order  to  compensate  for  legitimate 
implementation  behavior.  Modifications  are  made  by  the  AVF  in  cases  where 
legitimate  implementation  behavior  prevents  the  successful  completion  of  an 
(otherwise)  applicable  test.  Examples  of  such  modifications  include: 
adding  a  length  clause  to  alter  the  default  size  of  a  collection;  splitting 
a  Class  B  test  into  subtests  so  that  all  errors  are  detected;  and 
confirming  that  messages  produced  by  an  executable  test  demonstrate 
conforming  behavior  that  wasn’t  anticipated  by  the  test  (such  as  raising 
one  exception  instead  of  another). 

Modifications  were  required  for  78  Class  B  tests  and  1  Class  C  test. 


The  following  Class  B  tests  were  split  because  syntax  errors  at  one  point 
resulted  in  the  compiler  not  detecting  other  errors  in  the  test: 


B22003A 

B22004A 

B22004B 

B22004C 

B23004A 

B23004B 

B24001A 

B24001B 

B24001C 

B24005A 

B24005B 

B24007A 

B24009A 

B24204A 

B24204B 

B24204C 

B25002B 

B26001A 

B26002A 

B26005A 

B28003C 

B29001A 

B2A003A 

B2A003B 

B2A003C 

B2A007A 

B32103A 

B33201B 

B33202B 

B33203B 

B36002A 

B33301A 

B35101A 

B36201A 

B37201A 

B37205A 

B37307B 

B38003A 

B38003B 

B38009A 

B38009B 

B41201A 

B41202A 

B44001 A 

B44004B 

B44004C 

B45205A 

B48002A 

B4B002D 

B51001A 

B51003A 

B51003B 

B53003A 

B55A01A 

B64001A 

B64006A 

B67001A 

B67001B 

B67001C 

B67001D 

B74003A 

B91001H 

B91003B 

B95001 A 

B95003A 

B95004A 

B95007B 

B95079A 

B97101A 

B97102A 

BB3005A 

BC1303F 

BC2001D 

BC2001E 

BC3003A 

BC3003B 

BC3005B 

BC3013A 

C45651A  requires  that  the  result  of  the  expression  in  line  227  be  in  the 
range  given  in  line  228;  however,  this  range  excludes  some  acceptable 
results.  This  implementation  passes  all  other  checks  of  this  test,  and  the 
AVO  ruled  that  the  test  is  passed. 


3.7  ADDITIONAL  TESTING  INFORMATION 
3.7.1  Prevalidation 

Prior  to  validation,  a  set  of  test  results  for  ACVC  Version  1.9  produced  by 
the  M1750A,  Version  2.0.122  was  submitted  to  the  AVF  by  the  applicant  for 
review.  Analysis  of  these  results  demonstrated  that  the  compiler 
successfully  passed  all  applicable  tests,  and  the  compiler  exhibited  the 
expected  behavior  on  all  inapplicable  tests. 
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3.7.2  Teat  Method 

Testing  of  the  M1750A,  Version  2.0.122  using  ACVC  Version  1.9  was  conducted 
on-site  by  a  validation  team  from  the  AVF.  The  configuration  consisted  of 
an  R1000  Series  200  host  operating  under  Rational  Environment  Version 
D_10_9_1_1750a,  and  a  Mikros  MKS1750/SO  target  operating  as  a  bare  machine. 
The  host  and  target  computers  were  linked  via  RS  232  Direct  Connect. 

A  magnetic  tape  containing  all  tests  except  for  withdrawn  tests  and  tests 
requiring  unsupported  floating-point  precisions  was  taken  on-site  by  the 
validation  team  for  processing.  Tests  that  make  use  of 
implementation-specific  values  were  customized  before  being  written  to  the 
magnetic  tape.  Tests  requiring  modifications  during  the  prevalidation 
testing  were  included  in  their  modified  form  on  the  magnetic  tape. 

The  contents  of  the  magnetic  tape  were  loaded  directly  onto  the  host 
computer.  After  the  test  files  were  loaded  to  disk,  the  full  set  of  tests 
was  compiled  and  linked  on  the  R1000  Series  200,  and  all  executable  tests 
were  run  on  the  Mikros  MKS1 750/S0.  Object  files  were  linked  on  the  host 
computer,  and  executable  images  were  transferred  to  the  target  computer  via 
RS  232  Direct  Connect.  Results  were  printed  from  the  host  computer,  with 
results  being  transferred  to  the  host  computer  via  RS  232  Direct  Connect. 

-The  compiler  was  tested  using  command  scripts  provided  by  Rational,  Inc., 

and  reviewed  by  the  validation  team.  The  compiler  was  tested  using  all 

default  switch  settings  except  for  the  following: 

Switch  Effect 

Create_Subprogram_Specs  =  False  Separate  subprogram 

specification  is  not 
generated  automatically . 

Generates  Internal  data 
structures  for  use  by 
symbolic  debugger. 

Sets  optimization  to  an 
intermediate  level. 


Debugging_Level  s  Full 


Optimization_Level  =  4 


Tests  were  compiled,  linked,  and  executed  (as  appropriate)  using  a  single 
host  computer  and  a  single  target  computer.  Test  output,  compilation 
listings,  and  job  logs  were  captured  on  magnetic  tape  and  archived  at  the 
AVF.  The  listings  examined  on-site  by  the  validation  team  were  also 
archived . 
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3.7.3  Teat  Site 

Testing  was  conducted  at  Santa  Clara,  CA  and  was  completed  on  18  June  1988. 
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DECLARATION  OF  CONFORMANCE 


Rational,  Inc.  has  submitted  the  following  Declaration 
of  Conformance  concerning  the  M1750A,  Version  2.0.122. 


DECLARATION  OF  CONFORMANCE 


Compiler  Implementor:  Rational 

Ada®  Validation  Facility:  ASD/SCEL,  Wright-Patterson  AFB,  OH  45433-6503 
Ada  Compiler  Validation  Capability  (ACVC)  Version:  1.9 

Base  Configuration 


Base  Compiler  Name:  M1750a  Version:  2.0.122 

Host  Architecture:  R1000®  Operating  System:  D_10_ 9_l_1750a 

Target  Architecture:  Mikros  MKS1750/SO  Operating  System:  bare 

memory  size  128  Kwords 

Implementor's  Declaration 


I,  the  undersigned,  representing  Rational,  have  implemented  no  deliberate  extensions  to  the  Ada  Language  Standard 
ANSI/MIL-STD-1815A  in  the  compiler  listed  in  this  declaration.  1  declare  that  Rational  is  the  owner  of  record  of 
the  Ada  language  compiler  listed  above  and,  as  such,  is  responsible  for  maintaining  said  compiler  in  conformance  to 
ANSI/MIL-STD-1815A.  All  certificates  and  registrations  for  the  Ada  language  compiler  listed  in  this  declaration 
shall  be  made  only  in  the  owner’s  corporate  name. 


I,  the  undersigned,  representing  Rational,  take  full  responsibility  for  the  implementation  and  maintenance  of  the  Ada 
compiler  listed  above,  and  agree  to  the  public  disclosure  of  the  final  Validation  Summary  Report.  I  further  agree  to 
continue  to  comply  with  the  Ada  trademark  policy,  as  defined  by  the  Ada  Joint  Program  Office.  I  declare  that  all  of 
the  Ada  language  compilers  listed,  and  their  hostAargei  performance  are  in  compliance  with  the  Ada  Language 
Standard  ANSI/MIL-STD-1815A. 


®Ada  is  a  registered  trademark  of  the  United  States  Government  (Ada  Joint  Program  Office). 
®R1000  is  the  registered  trademark  of  Rational 


APPENDIX  B 


APPENDIX  F  OF  THE  Ada  STANDARD 


The  only  allowed  implementation  dependencies  correspond  to  implementation- 
dependent  pragmas,  to  certain  machine-dependent  conventions  a3  mentioned  in 
chapter  13  of  the  Ada  Standard,  and  to  certain  allowed  restrictions  on 
representation  clauses.  The  implementation-dependent  characteristics  of 
the  M1750A,  Version  2.0.122,  are  described  in  the  following  sections,  which 
discuss  topics  in  Appendix  F  of  the  Ada  Standard.  Implementation-specific 
portions  of  the  package  STANDARD  are  also  included  in  this  appendix. 


package  STANDARD  is 


type  INTEGER  is  range  -32768  ..  32767? 

type  FLOAT  is  digits  6  range  -1 .70141 183460469E+38  .. 

1.70141 163178060E+38; 

type  L0NG_FL0AT  is  digits  9  range  -1 .70141 183460469E+38  .. 

1 .701 41 1834601 60E+38; 

type  DURATION  is  delta  6. 10351562500000E-05  range 

-1. 70141 183460460469E+38  ..  1 .70141 163178060E+38; 


end  STANDARD; 
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Appendix  F  for  the  Rational  Mil-Std-1750a  (bare)  Cross  Compiler 


1.  Implementation-Dependent  Pragmas 

The  Mil_Std_1750a  Cross-Compiler  supports  pragmas  for  application  software  development  in  addition  to  those 
listed  in  Appendix  B  of  the  Reference  Manual  for  the  Ada  Programming  Language.  They  are  described  below, 
along  with  additional  clarifications  tnd  restrictions  for  pragmas  defined  in  Appendix  B  of  the  Reference  Manual  for 
the  Ada  Programming  Language. 


1.1.  Pragma  Main 

A  paramexerless  library  unit  procedure  can  be  designated  as  a  main  program  by  including  a  pragma  Main  at  the  end 
of  the  specification  or  body  of  the  unit.  This  pragma  causes  the  linker  to  run  and  create  an  executable  program  when 
the  body  of  this  subprogram  is  coded.  Before  a  unit  having  a  pragma  Main  can  be  coded,  all  unite  in  the  transitive 
with-closure  of  the  unit  must  be  coded. 

The  pragma  Main  has  arguments  that  can  control  the  way  the  linker  builds  the  executable  program. 

•  S  tack_S  ize:  This  argument  takes  a  static-integer -expression  as  parameter:  it  specifies  the  size,  in  bytes,  of 
the  main  task  stack.  If  not  specified,  the  default  value  is  3K  bytes.  The  value  must  lie  in  the  range  256 .. 
2—15-1. 

•  Heap_Size:  This  argument  takes  a  static-integer-expression  as  parameter;  it  specifies  the  size,  in  bytes,  of 
the  heap.  The  value  must  lie  in  the  range  0 ..  2**  15-1.  If  not  specified,  the  default  value  of  the  Keap_Sire 
is  16K  bytes. 

The  complete  syntax  for  this  pragma  is: 

pragma_main  :  PRAGMA  MAIN 

[  (  main_option  [  ,  main__option  ]  )  )  ; 

main_option  : : •  S7ACX_SIZE  m>  3tatic_Jlnteger_expre33ion  1 

HEAP_SIZE  “>  3tatic_inr.eger_expre3sion 

The  pragma  Main  must  appear  immediately  following  the  declaration  or  body  of  a  parameteriess  library  unit 
procedure. 


L2.  Pragma  Nickname 

The  pragma  Nickname  can  be  used  to  give  a  unique  string  name  to  a  procedure  or  function  besides  its  normal  Ada 
name.  It  can  be  used  to  disambiguate  overloaded  procedures  or  functions  in  the  importing  and  exporting  pragmas 
defined  in  subsequent  sections. 

The  pragma  Nickname  must  appear  immediately  following  the  declaration  for  which  it  is  to  provide  a  nickname. 

It  has  a  single  argument,  the  nickname,  which  must  be  a  string  constant. 

For  example  (pragma  Import_Function  is  described  fully  in  a  subsequent  section): 

function  Cat  (L:  Integer;  R:  String)  return  String; 
pragma  Nickname  ("Int-Str-Cat") ; 

function  Cat  (L:  String;  R:  Integer)  return  String; 
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pragma  Nickname  (“Str-Int-Cat") ; 
pragma  Interface  (Assembly,  Cat) ; 

pragma  Import_Function  (Cat,  Nickname  ->  "Int-Str-Cat", 

External  ->  *CAT$ZNT_STR_CONCAT", 
Mechanism  ->  (Value,  Reference) ) ; 

pragma  Import_Function  (Cat,  Nickname  ->  "Str-Int-Cat", 

External  ->  " CAT $STR_ INT_C ONCAT " , 
Mechanism  ->  (Reference,  Value) ) ; 


L 3.  Importing  and  Exporting  Subprograms 

A  subprogram  "written  in  another  language  (typically,  assembly  language)  can  be  called  from  an  Ada  program  if  it  is 
declared  with  a  pragma  Interface.  The  rules  for  placement  of  pragma  Interface  are  given  in  section  13.9  of 
the  Reference  Manual  for  the  Ada  Programming  Language.  Every  interfaced  subprogram  must  have  an 
Mil_Std_1750a  cross-compiler  defined  importing  pragma,  either  the  pragma  Import_Procedure  or  the  pragma 
Import_F  unction.  These  pragmas  are  used  to  declare  the  external  name  of  the  subprogram  and  the  parameter 
passing  mechanism  for  the  subprogram  call. 

A  subprogram  written  in  Ada  can  be  made  accessible  to  code  written  in  another  language  by  using  an 
Mil_Std_1750a  cross-compiler  defined  exporting  pragma.  The  effect  of  such  a  pragma  is  to  given  the  subprogram  a 
defined  symbolic  name  that  the  linker  can  use  when  resolving  references  between  object  modules. 

The  importing  and  exporting  pragmas  can  only  be  applied  to  non  generic  procedures  and  functions. 


1-3.1.  Subprogram  Importing  Pragmas 

The  pragmas  Import_Procedure  and  Import_Function  are  used  for  importing  subprograms.  A  pragma 
Interface  must  preceed  one  of  these  import  pragmas,  otherwise,  the  placement  rules  for  these  pragmas  are 
identical  to  those  of  the  pragma  Interface. 

The  importing  pragmas  have  the  form: 

inporting_sragma  PRAGMA  inporting_type 

(  [  INTERNAL  ->  ]  internal_name 

I  ,  [  EXTERNAL  ->  ]  extemaljiame  ] 
t  [  *  1  PARAMETER_TTFES  ">  ]  parameter  types  1 
l  ,  (  RESULTjrrPE  ->  ]  type_mark  ]  I 
[  ,  NICKNAME  ■>  string__literal  ]  ) 

[  ,  I  MECHANISM  •>  ]  mechanisms  ]  )  ; 

import ing_type  IMPORT_PROCEDUR£  )  IMP  CRT__FUNCT  I  ON 

intemai_narae  identifier  I 

strinc_iiteral  —  An  operator  designator 

exterr.al_r.ane  :  identifier  I  strir.g_literai 

parameter_cypes  : (  NULL  )  I  (  type_mark  (  ,  typejnark  }  ) 

mechanisms  : : -  mechanism  name  I 


(  mechanism_name  {  ,  mechanism_name  }  ) 

mechanism_name  : VALUE  I  REFERENCE 

The  internal  name  is  the  Ada  name  of  the  subprogram  being  interfaced.  If  there  is  more  than  one  subprogram  in  the 
declarative  region,  proceeding  the  importing  pragma,  then  (he  correct  subprogram  must  be  identified  using  either  the 
argument  types  (and  result  type,  if  a  function)  or  specifying  the  nickname. 

If  used  to  disambiguate  an  overloaded  internal  name,  the  value  of  the  Pararaeter_Types  argument  consists  of  a 
list  of  type  or  subtype  names,  not  names  of  parameters.  Each  one  corresponds,  positionally,  to  a  formal  parameter  in 
the  subprogram’s  declaration.  If  the  subprogram  has  no  parameters  then  the  list  consists  of  the  single  word  null. 

In  the  case  of  a  function,  the  value  of  the  Result_Type  argument  is  the  name  of  the  type  or  subtype  returned  by 
the  function. 

The  external  designator,  specified  with  the  External  parameter,  is  a  character  string  which  is  an  identifier  suitable 
for  the  1750a  assembler.  If  the  external  designator  is  not  specified,  then  the  internal  name  is  used. 

The  argument  Mechanism  is  required  if  the  subprogram  has  any  parameters.  It  specifies  in  a  parenthesized  list  the 
passing  mechanism  for  each  parameter  to  be  passed.  The  passing  mechanism  may  be  either  Value  or 
Reference.  For  functions,  it  is  not  possible  to  specify  the  passing  mechanism  of  the  function  result:  the  standard 
Ada  mechanism  for  the  given  type  of  the  function  result  must  be  used  by  the  interfaced  subprogram.  If  there  is  one 
or  more  parameters,  and  they  all  use  the  same  passing  mechanism,  then  an  alternate  form  for  the  Mechanism 
parameter  may  be  used:  Instead  of  a  parenthesized  list  with  an  element  for  each  parameter,  the  single 
name  (not  parenthesized)  may  be  used  instead 

Examples: 

procedure  Locate  (Source:  in  String; 

Target;  in  String; 

Index:  out  Natural) ; 

pragma  Interface  (Assembler,  Locate) ; 
pragma  Iraport__Procedure 

(Locate,  "SIRS LOCATE", 

PararaeterJTypes  ->  (String,  String,  Natural) , 

Mechanism  ->  (Reference,  Reference,  Value) ) ; 


function  Pwr  (I:  Integer;  N:  Integer)  return  Float; 
function  Pwr  (F:  Float;  N:  Integer)  return  Float; 

pragma  Interface  (Assembler,  Pwr) ; 
pragma  Import_Function 

(Internal  *>  Pwr, 

ParameterJTypes  ->  (Integer,  Integer), 
Result_Type  ■>  Float, 

'  Mechanism  ->  Value, 

External  *■>  "MATHS?WR_OF_INTEGER")  ; 
pragma  Import_Functior. 

(Internal  ->  Pwr 

ParameterJTypes  ->  (Float,  Integer), 
ResuitJType  «>  Float, 

Mechanism  ■>  Value, 

External  ->  "MATHSPWR  OF  FLOAT") ; 
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1-3-2.  Subprogram  Exporting  Pragmas 

The  pragmas  Export.__Proced.ure  and  Export_F unction  are  used  to  make  an  Ada  subprogram  available  to 
external  code  in  a  different  language  by  defining  a  global  symbolic  name  that  the  linker  can  use. 

An  exporting  pragma  can  be  given  only  for  subprograms  which  are  library  units,  or  are  declared  in  the  outermost 
declarative  part  of  a  library  package.  An  exporting  pragma  can  be  placed  after  a  subprogram  body  only  if  the 
subprogram  either  doesn’t  have  a  separate  specification  or  the  specification  is  in  the  same  declarative  part  as  the 
body.  Thus,  an  exporting  pragma  can't  be  applied  to  the  body  of  a  library  subprogram  which  has  a  separate 
specification.  An  exporting  pragma  cannot  be  given  for  a  generic  library  subprogram,  or  for  a  subprogram  declared 
in  a  generic  library  package. 

These  pragmas  have  similar  arguments  to  the  importing  pragmas,  except  that  it  is  not  possible  to  specify  the 
parameter  passing  mechanism.  The  standard  Ada  parameter  passing  mechanisms  are  choosen.  For  descriptions  of 
the  pragma’s  arguments.  Internal,  External,  Parameter_Types,  Result _Type,  and  Nickname,  see 
the  proceeding  section  on  the  importing  pragmas. 

The  full  syntax  of  (he  pragmas  for  exporting  subprograms  is: 


export  ing__pragma 


export ing_type 
interaal^nane 

exteraal__name 
paraxnet  er__types 
Examples: 


PRAGMA  expcrting_type 
(  [  INTERNAL  «•>  ]  intemal_name 

[  ,  (  EXTERNAL  <■>  ]  external_name  1 
l  t  ,  [  PARAMETER_TTPES  ->  ]  parameter_types  3 
[  ,  [  R£SULT_TTPE  ->  ]  typejnark  ]  I 
t  ,  NICXNAME~->  striag_literal.  3  3); 

EXPORT  JPR0CE3URE  |  £XPORT__FUNCTION 

identifier  1 

at ring— literal  — •  An  operator  designator 

identifier  I  atring_literal 
(  NULL  )  1  (  type__mark  {  ,  typejnark  }  ) 


procedure  Matrix_Multiply 

(A,  B:  in  Matrix;  C:  out  Matrix) ; 


pragma  Export_Procedure  (Matrix_Multiply> ; 

—  External  name  ia  the  string  "Matrix_Muitiply" 

function  Sin  (R:  Radians)  return  float; 
pragma  £xport_Function 

(Internal  ■>  Sin, 

External  ->  " S IN__RAD IANS " )  ; 

—  Exteimal  name  is  the  string  "SXN_RADIANS" 


1.4.  Importing  and  Exporting  Objects 

Object  can  be  imported  or  exported  from  an  Ada  unit  with  the  pragmas  Import  Object  and 

ExportjOb  ject.  The  pragma  lmport_Ob  ject  makes  an  Ada  name  reference  storage  declared  and  allocated 

in  some  external  (non- Ada)  object  module.  The  pragma  Expo rt_0b ject  provides  an  object  declared  within  an 
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Ada  unit  with  an  externally  available  symbolic  name  that  the  linker  can  use  to  put  together  a  program  with  modules 
written  in  some  other  language.  In  any  case,  it  is  the  responsibility  of  the  programmer  to  insure  that  the  internal 
structure  of  the  object  is  such  that  the  non- Ada  code  or  data  layout  matches;  such  checks  cannot  be  performed  by  the 
cross-compiler. 

The  object  to  be  imported  or  exported  must  be  a  variable  declared  at  the  outermost  level  of  a  library  package 
specification  or  body. 

The  size  of  the  object  must  be  static,  thus  the  type  of  the  object  must  be  one  of: 

•  A  scalar  type  (or  subtype). 

•  An  array  subtype  with  static  index  cons  train  es  whose  component  size  is  static. 

•  A  simple  record  type  or  subtype. 

Objects  of  a  private  or  limited  private  type  can  be  imparted  or  exported  only  into  the  package  that  declares  the  type. 
Imported  objects  cannot  have  an  initial  value,  and  thus  cannot  be: 

•  constant. 

•  An  access  type. 

•  A  task  type. 

•  A  record  type  with  discriminants,  or  with  components  with  default  initial  expressions,  or  with  components 
which  are  access  types  or  task  types. 

Finally,  the  object  must  not  be  in  a  generic  unit. 

The  external  name  specified  must  be  suitable  for  an  identifier  in  the  assembler. 

The  full  syntax  for  the  pragmas  Import_Ob  ject  and  Export_Ob  ject  is: 

object_pragma  : PRAGMA  ob ject_pragma_type 

(  [  INTERNAL  ->  ] “identifier 

[  ,  I  EXTERNAL  ->  ]  string_literal  )  )  ; 

object_?ragma_type  :  IMPORT_OBJZCT  I  EXP  ORT_OB  JECT 


L5.  Pragma  Supprass^All 

This  pragma,  is  equivalent  to  the  following  sequence  of  pragmas: 


pragma  Suppress 
pragma  Suppress 
pragma  Suppress 
pragma  Suppress 
pragma  Suppress 
pragma  Suppress 
pragma  Suppress 
pragma  Suppress 
pragma  Suppress 


(Access_Check) ; 
<Discriminant_Check) ; 
(Division  .Check)  ; 
(ELabora^ ion_Check) ? 
(Index_Check)  ; 
(Lengthy Check) ; 

(Overf !ow_Check) ; 
(Range_Cheek)  ; 
(Storage_Check) ; 
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Note  that,  just  as  pragma  Suppress,  the  Suppress_A.ll  pragma  cannot  prevent  the  raising  of  certain 
exceptions.  For  example,  numeric  overflow  or  dividing  by  zero  is  detected  by  the  hardware,  which  results  in  the 
predefined  exception  Numeric_Error  being  raised.  Refer  to  Chapter  7,  “Run-Tune  Organization",  for  more 
information. 

The  pragma  Suppress_All  must  appear  immediately  within  a  declarative  pan. 


2.  Implementation-Dependent  Attributes 

There  are  no  implementation-dependent  attributes. 


3.  Package  System 

package  System  is 

type  Name  is  (Mil_Std_1750a) ; 

System_Name  :  constant  Name  Mil_Std_1750a; 

Storage_Unit  :  constant  16; 

Memory_"ixe  ;  constant  2  **  16; 

Min_Int  :  constant  -(2  **  15); 

Max_Int  :  constant  +(2  **  15)  -  1; 

Max_Digits  :  constant  9; 

Max_Mantissa  :  constant  :•  31; 

Fine  Delta  :  constant  2.0  **  (-31); 


Tick  :  constant  :*■  1.0E-04; 

subtype  Priority  is  Integer  range  1  ..  254; 

type  Address  is  private; 


Address  Zero  :  constant  Address; 


function 

(Left 

function 

a 

+ 

9 

(Left 

function 

(Left 

function 

(Left 

function 

(Left 

function 

n 

(Lef 

function 

(Left 

function 

(Lef' 

Address;  Right  :  Integer)  return  Address; 
Integer;  Right  ;  Address)  return  Address; 
Address;  Right  :  Address)  return  Integer; 
Address;  Right  :  Integer)  return  Address; 

Right  ;  Address)  return  Boolean; 

Right  :  Address)  return  Boolean; 

Right  :  Address)  return  Boolean; 

Right  :  Address)  return  Boolean; 


function  To_Address  (X  :  Integer)  return  Address; 
function  To_Intecer  (X  :  Address)  return  Integer; 


private 
end  System; 
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4.  Restrictions  on  Representation  Clauses 


4.L  Length  clauses 

Size  specifications  are  allowed  only  on  discrete  types  that  are  not  derived  types.  There  are  no  restrictions  on 
specifications  of  collection  size  or  task  activation  size.  Small  may  be  specified  for  a  fixed  point  type  so  long  as  it  is 
a  power  of  two  that  does  not  exceed  the  given  delta  and  still  permits  representation  of  all  necessary  values,  and  so 
long  as  the  fixed  point  type  is  not  a  derived  type. 


4.2.  Enumeration  Representation  Clauses 

Enumeration  representation  clauses  are  not  permitted  on  derived  enumeration  types. 


4 J.  Record  Representation  Clauses 

A  record  field  can  consist  of  any  number  of  bits  between  1  and  16  inclusive;  otherwise  it  must  be  an  integral  number 
of  16-bit  words.  There  are  no  other  restrictions  on  record  field  specifications.— - 

4.4.  Address  Clauses 

Address  clauses  are  not  supported. 


5.  Names  denoting  implementation-dependent  components 

There  are  no  implementation  dependent  components  that  can  be  named  in  representation  clauses. 


6.  Interpretation  of  expressions  that  appear  in  address  clauses 

Address  clauses  are  not  supported. 


7.  Unchecked  conversion 

The  target  type  of  an  unchecked  conversion  cannot  be  an  unconstrained  array  type  or  an  unconstrained  discriminated 
type. 


8.  Implementation  dependent  characteristics  of  the  input  output  packages 

Text  files  other  than  standard  input  and  standard  output  are  not  supported.  Sequendal.Io  and  Direct.Io  files  are  not 
supported.  Any  attempt  to  create  such  a  fi1  i  will  cause  the  exception  Use.Enor  to  be  raised.  Sequential _Io  and 
Direct.Io  cannot  be  instantiated  with  unconstrained  record  or  array  types. 


APPENDIX  C 


TEST  PARAMETERS 


Certain  testa  in  the  ACVC  make  use  of  implementation-dependent  values,  such 
as  the  maximum  length  of  an  input  line  and  invalid  file  names.  A  test  that 
makes  use  of  such  values  is  identified  by  the  extension  .TST  in  its  file 
name.  Actual  values  to  be  substituted  are  represented  by  names  that  begin 
with  a  dollar  sign.  A  value  must  be  substituted  for  each  of  these  names 
before  the  test  is  run.  The  values  used  for  this  validation  are  given 
below. 


Name  and  Meaning _ 

$BIG_ID1 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  last  character. 

$BIG_ID2 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  last  character. 

$BIG_ID3 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  middle  character. 

$BIG_ID4 

Identifier  the  size  of  the 

maximum  input  line  length  with 

varying  middle  character. 

$BIG_INT_LIT 

An  integer  literal  of  value  298 
with  enough  leading  zeroes  so 
that  it  is  the  size  of  the 
maximum  line  length. 


Value _ 

( 1 . .253  *>’A' ,  254  =>'1») 


(1..253  =>’A’,  254  =>'2») 


(1..126  I  128. .254  =>'A»,  127  =>’3’) 


(1..126  I  128. .254  =>*A',  127  =>’4') 


(1..251  =>’0’,  252. .254  =>"298") 
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TEST  PARAMETERS 


Sang  and  Meaning _ 

$BIG_REAL_LIT 

A  universal  real  literal  of 
value  690.0  with  enough  leading 
zeroes  to  be  the  size  of  the 
maximum  line  length. 

$BIG_STRING 1 

A  string  literal  which  when 
catenated  with  BIG_STRING2 

yields  the  image  of  BIG_ID1. 

$BIG_STRING2 

A  string  literal  which  when 
catenated  to  the  end  of 
BIG_STRING1  yields  the  image  of 
BIG~ID1 . 

^BLANKS 

A  sequence  of  blanks  twenty 
characters  less  than  the  size 
of  the  maximum  line  length. 

$COUNT_LAST 

A  universal  integer 

literal  whose  value  is 

TEXT_IO. COUNT 'LAST. 

$FIELD_LAST 

A  universal  integer 

literal  whose  value  is 

TEXTJtO .  FIELD  ’  LAST . 

$FILE_NAME_WXTH_BAD_CHARS 

An  external  "file  name  that 
either  contains  invalid 

characters  or  is  too  long. 

$FIL3_NAME_WITH_WILD_CARD_CHAR 

An  external  file  name  that 
either  contains  a  wild  card 

character  or  is  too  long. 

$GREATER_THAN_DURATION 

A  universal  real  literal  that 
lies  between  DURATION’ BASE' LAST 
and  DURATION ’LAST  or  any  value 
in  the  range  of  DURATION. 


Value _ 

( 1 . .248  s>’0’,  249. .254  s>"69. 0E1 ") 


(1..127  s> ’A ’ ) 


(1..126  s> 'A ’ ,  127  => ’ 1  * ) 


(1..234  =>•  ’) 


32760 


32767 


"BAD  CHARACTERS&Os" 


"WILDCARDS?" 


0.0 
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TEST  PARAMETERS 


Name  and  Meaning _ _ 

$GREATER_THAN_DURATION_BASE_LAST 

A  universal  real  literal  that  is 
greater  than  DURATION’ BASE 'LAST. 

$ILLEGAL_EXTERNAL_FILE_NAME1 

An  "external  file  name  which 
contains  invalid  characters . 

$ILLEGAL_EXTERNAL_FILE_NAME2 

An  external  file  name  which 
is  too  long . 

$INTEGER_FIRST 

A  universal  integer  literal 
whose  value  is  INTEGER' FIRST. 

$INTEGER_LAST 

A  universal  integer  literal 
whose  value  is  INTEGER 'LAST. 

$  IN7SGER_LAST_PLUS_1 

A  universal  integer  literal 
whose  value  is  INTEGER' LAST  +  1 . 

$LESS_THAN_DURATION 

A  universal  real  literal  that 
lies  between  DURATION 'BASE 'FIRST 
and  DURATION 'FIRST  or  any  value 
in  the  range  of  DURATION. 

$LESS_THAN_DURATION_BASE_FIRST 

A  universal  real  literal  that  is 
less  than  DURATION 'BASE 'FIRST. 

$MAX_DIGITS 

Maximum  digits  supported  for 
floating-point  types . 

$MAX_INJLEN 

Maximum  input  line  length 
permitted  by  the  Implementation. 

$MAX_INT 

A  universal  integer  literal 
whose  value  is  SYSTEM. MAX_INT. 

$MAX_INT_PLUS_1 

A  universal  integer  literal 
whose  value  is  SYSTSM.MAX  INT+1. 


Value _ ____ 

200_000.0 

"BAD_CHARACTERS&<>=" 

STRING ’(1.. 100  => 'A ' )&STRING' ( 1 . . 100  =>'A') 
ASTRING ’ ( 1 . . 100  =>’A') 

-32768 

32767 

32767  +  1 

0.0 

-200_000.0 

9 

25*» 

32767 

32767  +  1 
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TEST  PARAMETERS 


Name  and  Meaning 


Value 


$MAX_LEN_INT_BASED_LITERAL 

A  universal  integer  based 
literal  whose  value  is  2#11# 
with  enough  leading  zeroes  in 
the  mantissa  to  be  MAX_IN_LEN 
long. 

$MAX_LEN_REAL_BASED_LITERAL 

A  universal  real  based  literal 
whose  value  is  16:F.E:  with 
enough  leading  zeroes  in  the 
mantissa  to  be  MAX_IN__LEN  long. 

$MAX_STRING_LITERAL 

A  string  literal  of  size 
MAX_IN_LEN,  including  the  quote 
characters . 


(1..2  =>"2:",  3. -251  =>’0V 
252. .254  =>"11:") 


(1..3  =>"16:",  4. .250  =>'0 
251.. 254  =>"F.E:") 


(1..2  =>"A",  3- .252  =>'A', 
253.. 254  =>"A") 


$MIN_INT  -32768 

A  universal  integer  literal 
whose  value  is  SYSTEM .MIN_INT. 


$name  NOJSUCHTYPE 

A  name  of  a  predefined  numeric 
type  other  than  FLOAT,  INTEGER, 

SHORT_FLOAT,  SH0RT_INTEGER, 

L0NG_FL0AT,  or  L0NG_INTEGER . 

$NEG_BASED_INT  l6#FFFE# 

A  based  Integer  literal  whose 
highest  order  nonzero  bit 
falls  in  the  sign  bit 
position  of  the  representation 
for  SYSTEM  .MAX  INT. 


APPENDIX  D 


WITHDRAWN  TESTS 


Some  tests  are  withdrawn  from  the  ACVC  because  they  do  not  conform  to  the 
Ada  Standard.  The  following  27  tests  had  been  withdrawn  at  the  time  of 
validation  testing  for  the  reasons  indicated.  A  reference  of  the  form 
"Al-ddddd"  is  to  an  Ada  Commentary. 

.  B28003A:  A  basic  declaration  (line  36)  incorrectly  follows  a 

later  declaration. 

.  E28005C:  This  test  requires  that  "PRAGMA  LIST  (ON);"  not 

appear  in  a  listing  that  has  been  suspended  by  a  previous 
"PRAGMA  LIST  (OFF);";  the  Ada  Standard  is  not  clear  on  this 
point,  and  the  matter  will  be  reviewed  by  the  AJPO. 

.  C34004A:  The  expression  in  line  168  yields  a  value  outside 

the  range  of  the  target  type  T,  but  there  is  no  handler  for 
CONSTRAINT_ERROR. 

.  C35502P:  The  equality  operators  in  lines  62  and  69  should  be 

inequality  operators. 

.  A35902C:  The  assignment  in  line  17  of  the  nominal  upper 
bound  of  a  fixed-point  type  to  an  object  raises 

CONSTRAINT_ERROR,  for  that  value  lies  outside  of  the  actual 
range  of  the  type. 

.  C35904A:  The  elaboration  of  the  fixed-point  subtype  on  line 

28  wrongly  raises  CONSTRAINT_ERROR,  because  its  upper  bound 
exceeds  that  of  the  type . 

.  C35904B:  The  subtype  declaration  that  is  expected  to  raise 

CONSTRAINT__ERROR  when  its  compatibility  is  checked  against 
that  of  various  types  passed  as  actual  generic  parameters, 
may,  in  fact,  raise  NUMERIC_ERROR  or  CONSTRAINT_ERROR  for 
reasons  not  anticipated  by  the  test. 


WITHDRAWN  TESTS 


.  C35A03E  and  C35A03R:  These  tests  assume  that  attribute 

•MANTISSA  returns  0  when  applied  to  a  fixed-point  type  with  a 
null  range ,  but  the  Ada  Standard  does  not  support  this 
assumption. 

.  C37213H:  The  subtype  declaration  of  SCONS  in  line  100  is 

incorrectly  expected  to  raise  an  exception  when  elaborated. 

.  C37213J*  The  aggregate  in  line  451  incorrectly  raises 

CONST RAINT_ERROR . 

.  C37215C,  C37215E,  C37215G,  and  C37215H:  Various  discriminant 

constraints  are  incorrectly  expected  to  be  incompatible  with 
type  CONS. 

.  C38102C:  The  fixed-point  conversion  on  line  23  wrongly 

raises  C0NSTRAINT_ERR0R. 

.  C41402A:  The  attribute  • STORAGE  JSIZE  is  incorrectly  applied 

to  an  object  of  an  access  type . 

.  C45332A:  The  test  expects  that  either  an  expression  in  line 

52  will  raise  an  exception  or  else  MACHINE_0VERFL0WS  is 
FALSE.  However,  an  implementation  may  evaluate  the 
expression  correctly  using  a  type  with  a  wider  range  than  the 
base  type  of  the  operands ,  and  MACHINE  OVERFLOWS  may  still  be 
TRUE. 

.  C45614C:  The  function  call  of  IDENT_INT  in  line  15  uses  an 

argument  of  the  wrong  type. 

.  A74106C,  C85018B,  C87B04B,  and  CC1311B:  A  bound  specified  in 

a  fixed-point  subtype  declaration  lies  outside  of  that 
calculated  for  the  base  type,  raising  CONSTRAINT_ERROR. 
Errors  of  this  sort  occur  at  lines  37  &  59,  142  &  143,  16  A 
48,  and  252  &  253  of  the  four  tests,  respectively. 

.  BC3105A:  Lines  159  through  168  expect  error  messages,  but 

these  lines  are  correct  Ada. 

.  AD1A01A:  The  declaration  of  subtype  SINT3  raises 

C0NSTRAINT_ERR0R  for  implementations  which  select  INT'SIZE  to 
be  16  or  greater. 

.  CE2401H;  The  record  aggregates  in  lines  105  and  117  contain 

the  wrong  values. 

.  CE3208A:  This  test  expects  that  an  attempt  to  open  the 

default  output  file  (after  it  was  closed)  with  mode  IN_FIL2 
raises  NAME__ERR0R  or  USE_ERR0R;  by  Commentary  AI-00043, 
MODE  ERROR  should  be  raised . 
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Compiler  Name:  M1750A,  Version  2.0.122 
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